Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/boP2mIANaucZlwrfqk-4gvpRVt8.mft
File:                     boP2mIANaucZlwrfqk-4gvpRVt8.mft (raw, json)
Hash identifier:          xdg0WrXHBH7PMdVhwZUNH6bQ0lIufWpsUX66HHHvpCc=
Subject key identifier:   41:5F:67:F0:7C:4C:79:41:7F:7A:D0:40:53:02:8A:12:05:07:FF:4F
Authority key identifier: 6E:83:F6:98:80:0D:6A:E7:19:97:0A:DF:AA:4F:B8:82:FA:51:56:DF
Certificate issuer:       /CN=6e83f698800d6ae719970adfaa4fb882fa5156df
Certificate serial:       018F60A9A7EF481C6184A3CB81A472B93D53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boP2mIANaucZlwrfqk-4gvpRVt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/boP2mIANaucZlwrfqk-4gvpRVt8.mft
Manifest number:          1168
Signing time:             Fri 10 May 2024 04:01:22 +0000
Manifest this update:     Fri 10 May 2024 04:01:22 +0000
Manifest next update:     Sat 11 May 2024 04:01:22 +0000
Files and hashes:         1: boP2mIANaucZlwrfqk-4gvpRVt8.crl (hash: qMhDFEcPbz8Tkun2MrwpgkYqXrBysRxkXpTX2xGKw2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:60:a9:a7:ef:48:1c:61:84:a3:cb:81:a4:72:b9:3d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e83f698800d6ae719970adfaa4fb882fa5156df
        Validity
            Not Before: May 10 04:01:22 2024 GMT
            Not After : May 11 04:01:22 2024 GMT
        Subject: CN=415f67f07c4c79417f7ad04053028a120507ff4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:f0:16:24:88:48:fb:5d:b7:56:dd:c6:7c:
                    64:6c:a1:62:ad:bf:98:e1:53:87:11:67:7c:d8:7c:
                    d6:c2:73:8d:04:7c:6a:7d:c5:26:34:d2:75:9a:86:
                    75:e0:98:08:ca:9b:c2:d2:ce:a4:7b:15:17:5a:dc:
                    d3:2d:91:c8:42:80:48:07:33:12:bd:42:34:7d:54:
                    c7:2e:07:de:0c:7b:49:62:0a:5d:19:c5:bc:97:ae:
                    3d:dd:cc:4e:4e:a9:64:20:ec:8d:7d:6e:c8:c8:46:
                    0e:a3:87:78:e9:87:87:df:d6:a0:c8:e3:15:0e:da:
                    7d:e6:5f:2a:c3:86:80:85:59:03:8e:7b:95:95:86:
                    7e:99:1a:c1:ce:b0:78:49:a6:cb:9d:08:07:41:25:
                    2f:50:fb:02:3a:a0:f6:c0:2c:95:b3:eb:4d:e1:e1:
                    70:59:83:72:55:66:86:12:17:3f:1c:e7:84:18:04:
                    8d:2f:1c:84:09:24:20:5b:7a:28:07:66:cf:f0:38:
                    e6:25:43:12:7a:a0:10:da:20:07:82:9b:07:5d:66:
                    90:ad:8c:f9:79:82:5d:7e:da:70:bc:43:a8:80:9a:
                    de:71:3b:ba:52:aa:3f:00:e5:36:8e:30:ad:39:e5:
                    43:b2:34:fd:2f:26:d5:c2:5d:8d:1b:59:12:e9:f7:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5F:67:F0:7C:4C:79:41:7F:7A:D0:40:53:02:8A:12:05:07:FF:4F
            X509v3 Authority Key Identifier:
                keyid:6E:83:F6:98:80:0D:6A:E7:19:97:0A:DF:AA:4F:B8:82:FA:51:56:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2mIANaucZlwrfqk-4gvpRVt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/boP2mIANaucZlwrfqk-4gvpRVt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/boP2mIANaucZlwrfqk-4gvpRVt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:36:5f:51:e3:15:dc:fc:64:29:15:20:f1:d2:ca:39:87:51:
         0f:80:1a:5a:3c:7b:8f:2b:7e:93:30:b7:ff:2a:84:d5:c9:7b:
         a0:cd:68:9f:7c:d7:07:c2:cd:48:ae:ce:3a:55:4a:35:d1:cb:
         0c:5a:0d:67:27:9c:d5:bc:92:17:34:89:77:d8:33:e1:11:9b:
         8b:86:38:71:28:43:9d:50:f8:76:aa:04:e3:16:7e:34:28:5a:
         2d:2b:e1:75:60:8d:be:ce:f9:3b:82:60:eb:c8:8c:aa:43:6d:
         24:3c:d2:ad:84:4b:e4:03:1a:b2:31:99:84:ea:3f:ca:9e:69:
         59:2d:47:1e:d9:52:a2:e1:b0:77:4d:36:bd:e3:ae:ac:0b:21:
         93:9e:f8:6d:fb:bc:f5:71:cb:77:13:d9:89:85:29:d9:62:b5:
         ce:ff:9e:85:ab:c1:c3:39:47:95:d5:31:fd:72:3d:c8:54:6e:
         03:30:0f:d1:df:5b:07:58:a6:ed:22:9c:6e:33:38:07:82:50:
         a4:de:9e:91:b8:ee:db:09:82:81:a1:9f:26:df:e0:b6:ad:5c:
         fb:4b:51:ba:23:58:fb:93:b5:14:aa:cc:a2:09:cf:db:e8:3c:
         30:52:b3:7b:60:f9:42:a7:55:5c:43:11:2c:f9:00:bb:7f:14:
         95:d4:a5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----